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1 



DETAILED ACTION 



2 



3 



Claim Rejections - 35 USC §112 



4 



5 



The following is a quotation of the second paragraph of 35 U.S.C. 1 12: 



6 
7 
8 
9 

10 



The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 



Claim 19 is rejected under 35 U.S.C. 112, second paragraph, as being 



1 1 indefinite for failing to particularly point out and distinctly claim the subject 

1 2 matter which applicant regards as the invention. 



15 random number is stored within the device." However, this claim depends upon 

16 claim 16, and therefore, requires the limitations of "at least one preselected 

1 7 unique or distinctive hardware, software or firmware identifier" contained within 

18 the device, and the forming of a key derived from a combination of the "random 

1 9 or pseudo-random number" and the "at least one preselected unique or 

20 distinctive" identifier(s). The limitation of claim 19 creates confusion as to how 

21 the key is formed if there were not present "at least one preselected unique or 

22 distinctive hardware, software or firmware identifier within the device". It is 

23 uncertain as to the proper interpretation of the limitations of claim 19, and it 

24 would not be proper to reject the claim on the basis of prior art (see in In re 

25 Steele, 305 F.2d 859, 1 34 USPQ 292 (CCPA 1 962)). 



13 



14 



Claim 19 recites the limitation, "wherein only the random or pseudo- 
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1 Claim Rejections - 35 USC § 101 

2 

3 35 U.S.C. 101 reads as follows: 

4 Whoever invents or discovers any new and useful process, machine, manufacture, or 

5 composition of matter, or any new and useful improvement thereof, may obtain a patent 

6 therefor, subject to the conditions and requirements of this title. 
7 

8 

9 Claims 16 - 20 are rejected under 35 U.S.C. 101 because the claimed 

10 invention is directed to non-statutory subject matter. 

11 

12 Regarding claim 16, it is addressed to a key comprised of two data 

13 portions. The key is non-functional descriptive material, directed to data, perse. 

14 The key does not constitute a data structure, since there is no claimed functional 

1 5 interrelationship between data elements. Further, the key, introduced in the 

16 preamble, is "transmitted within a signal", therefore, claim 16 is also rejected as 

17 not being tangibly embodied because a signal is not tangible. 



18 



1 9 Regarding claims 1 7 - 20, they are rejected since they do not further 

20 modify claim 16 so as to become statutory. 
21 

22 For the purposes of searching prior art, it is presumed that the applicant 

23 will place claims 16-20 within a statutory category. 



25 
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1 Claim Rejections - 35 USC § 102 

2 

3 The following is a quotation of the appropriate paragraphs of 35 

4 U.S.C. 102 that form the basis for the rejections under this section made in this 

5 Office action: 

6 A person shall be entitled to a patent unless - 

7 (a) the invention was known or used by others in this country, or patented or described in a printed 

8 publication in this or a foreign country, before the invention thereof by the applicant for a patent. 
9 

10 

11 Claims 1, 2, 4- 8, and 10 are rejected under 35 U.S.C. 102(a) as being 

12 anticipated by Hales et al., "Method and System for Securely Downloading 

13 Content to Users", International Patent, WO 01/79971 A. Regarding these 

14 claims, they are rejected for the reasons supplied by the European patent 

15 examiner in the International Search Report performed on 12/19/03. 



16 



1 7 Claim Rejections - 35 USC § 103 

18 

19 The following is a quotation of 35 U.S.C. 103(a) which forms the basis for 

20 all obviousness rejections set forth in this Office action: 

21 (a) A patent may not be obtained though the invention is not identically disclosed or described 

22 as set forth in section 102 of this title, if the differences between the subject matter sought to 

23 be patented and the prior art are such that the subject matter as a whole would have been 

24 obvious at the time the invention was made to a person having ordinary skill in the art to which 

25 said subject matter pertains. Patentability shall not be negatived by the manner in which the 

26 invention was made. 
27 

28 Claims 1-18 and 20 are rejected under 35 U.S.C. 103(a) as being 

29 unpatentable over Iverson, "Making the Internet Safe for the Music 



30 Industry" in view of Mizikovsky et al., Automatic Generation of Private 
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1 Authentication Key for Wireless Communication Systems", U.S. Patent 

2 5,513,245. 

3 

4 Regarding claim 1 , the applicant has disclosed as prior art the existence of 

5 the Secure Digital Music Initiative (SDMI). SDMI defines a domain or system 

6 "intended to prevent unauthorized copying of digital music", comprising software 

7 (applications and modules) and hardware (portable devices and media). It is 

8 alleged that a person might somehow be able to circumvent the copy protection 

9 of the SDMI standard because the software domain is not bound to the hardware 

10 domain (The instant application, page 1, "Background of the Invention"). To 

1 1 address this problem, the applicant discloses "a method of binding copy 

12 protection program for securely holding the digital content to particular device via 

13 a key derived in part from unique or distinctive hardware, software and/or 

14 firmware identifiers within the device and in part from a random or pseudo- 

15 random number (The instant application, page 3, "Summary of the Invention", 

16 lines 6-11). Iverson discloses a system according to the Secure Digital Music 

17 Initiative (SDMI) specifications (Iverson, par. 2). The disclosed system employs 

18 a method of copy protection by binding the software domain to the hardware 

19 domain. In other words, the proper execution of the content managing 

20 software/firmware of a device depends upon the existence of unique hardware 

21 and firmware identifiers contained within the device. The key is derived from a 

22 plurality of hardware/firmware identifiers (Iverson, pars. 5, 6). Thus, Iverson 

23 discloses a copy protection program to securely hold protected content and 
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1 validates a device when a key is used to access the protected content (Iverson, 

2 par. 5, lines 4,5). The key is used to validate (authenticate) the device so as to 

3 gain access to protected content. As stated by the applicant, the derivation of 

4 the key from a plurality of unique device identifiers contributes to the distinctive 

5 linking of the key to the device (The instant application, page 9, lines 20-24; page 

6 1 0, lines 1 3-20). The applicant further discloses that the addition of the random 

7 number element to the key, protects the key by further adding to the uniqueness 

8 of the key (The instant application, page 10, line 21 - page 11, line 4). Thus, 

9 someone with the intent on illegally gaining access to protected content could not 

1 0 generate the key simply by "making a binary copy of the SDMI domain" and then 

1 1 distribute "the copies inappropriately to others" (The instant application, page 2, 

12 lines 2-5). Iverson does not disclose that the key is derived in part from a 

1 3 random or pseudo-random number. 

14 • However, adding a random number element to a key so as to make an 

15 unique authentication key for a device it is well known in the art. Mizikovsky et 

16 al. discloses that an authentication key used to validate a mobile device can be 

17 derived in part from distinctive hardware identifiers found within the device and in 

18 part from a random number received by the device (Mizikovsky et al, Abstract; 

19 col. 1 , lines 28-45). Mizikovsky et al. discloses that it is advantageous to add the 

20 random number element to the key because, otherwise, unauthorized persons 

21 could illegally generated the authentication key and gain access to a protected 

22 system simply by making a copy of the unique identifiers found within the device 

23 (Mizikovsky et al., col. 1 , lines 46-67). Mizikovsky shows that it is possible for 
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1 device identifiers to be stolen, and that authentication keys derived solely from 

2 the device identifiers are compromised. Thus, Mizikovsky et al. discloses a 

3 method of creating an authentication key derived in part from unique identifiers 

4 within a device and in part from a random number received by the device. 

5 It would have been obvious to one of ordinary skill in the art to combine 

6 the method Mizikovsky et al. for generating a unique and more secure 

7 authentication key with the system and method of Iverson for gaining access to 

8 protected content through the use of a unique authentication key because it is 

9 obvious that an authentication key derived in part from a random number 

1 0 element received by the device could help prevent the illegal generation of the 

1 1 key through the copying of the hardware environment. Thus, the combination of 

12 Iverson and Mizikovsky et al. discloses the generation of a key derived in part 

13 from a least one preselected unique identifier found within the device and in part 

14 from a random number. 
15 

16 Regarding claim 2, the combination of Iverson and Mizikovsky et al., 

17 discloses: 

1 8 accessing a value within the device for least one preselected hardware, 

19 software or identifier; firmware identifier (Iverson, par. 6.; Mizikovsky et al., col. 2, 

20 lines 3-14). 

21 retrieving a stored value relating to the key from a storage location within 

22 the device (Iverson, par. 6.; Mizikovsky et al., col. 2, lines 3-14). 
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1 computing value for the key from the accessed value for the at least one 

2 preselected hardware, software or firmware identifier and the stored value 

3 relating to the key (Iverson, par. 6.; Mizikovsky et al., col. 2, lines 3-14). 

4 and at least one of: controlling access to the protected content based 

5 upon a comparison of the computed value for the key and the stored value 

6 relating the key; and employing the computed value for the key to decrypt the 

7 protected content (Iverson, pars. 5, 6). 



8 



9 Regarding claim 3, the combination of Iverson and Mizikovsky et al. 

10 discloses: 

1 1 wherein the key is derived in part from a plurality of preselected unique or 

12 distinctive hardware, software or firmware identifiers within the device (Iverson, 

13 par. 6). 
14 

15 Regarding claim 4, the combination of Iverson and Mizikovsky et al. 

16 discloses: 

17 wherein the key is employed to control access to the protected content 

18 without being employed to encrypt or decrypt the protected content, thereby 

19 allowing the protected content be copied or transferred from the device to 

20 another device (Iverson, pars. 5, 6). As disclosed by Iverson, the key is used to 

21 boot the device, thus allowing access to the content. 
22 
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1 Regarding claim 5, the combination of Iverson and Mizikovsky et al. 

2 discloses: 

3 wherein the stored value relating to the key contains only the random or 

4 pseudo-random number (Mizikovsky et al., col. 1, lines 31-35). According to 

5 claim 2, the stored value is the random number received by the device. As 

6 disclosed by the combination of Iverson and Mizikovsky et al., the stored value 

7 contains the random number received by the device. 
8 

9 Regarding claim 6, the combination of Iverson and Mizikovsky et al. 

10 discloses: 

1 1 at least one hardware, software, firmware component within the device 

12 having associated therewith a unique or distinctive identifier (Iverson, par. 6); 

1 3 and copy protection program selectively executable within the device and 

14 securely holding the protected content, wherein the copy protection program, 

1 5 when employed to access the protected content, validates the device based 

1 6 upon a key derived part from the identifier for the least one hardware, software or 

1 7 firmware component and in part from a random or pseudo-random number 

18 (Iverson, pars. 5, 6). 
19 

20 Regarding claims 7-10, they are the device claims corresponding to the 

21 system claims 2-5 and they are rejected for the same reasons. 
22 



Application/Control Number: 10/043,388 Page 10 

Art Unit: 2137 



1 Regarding claims 11-15, they are the method claims with the 

2 corresponding limitations of the device claims 6-10 and they are rejected for the 

3 same reasons. 
4 

5 Regarding claim 16, the combination of Iverson and Mizikovsky et al. 

6 disclose a key comprising: 

7 a first portion derived from at least one unique or distinctive hardware, 



8 software or firmware identifier within the device (Iverson, par. 6.; Mizikovsky et 

9 al., col. 2, lines 3-14). 

1 0 and a second portion derived from a random or pseudo-random number 

1 1 (Mizikovsky et al., col. 2, lines 3-14). 



1 2 wherein the key is employed by a copy protection program securely 

1 3 holding protected content within the device to validate device when employed to 

14 access the protected content (Iverson, par 5, lines 3-5). 
15 

16 Regarding claims 17 and 18, they are apparatus claims corresponding to 

17 the system claims 3 and 4 and they are rejected for the same reasons. 
18 

19 Regarding claim 20, the combination of Iverson and Mizikovsky et al. 

20 disclose: 

21 wherein only the random or pseudo-random number transmitted 

22 within the signal to the device (Mizikovsky et al., col. 2, lines 6-8). 
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1 

2 Claim 3 and 9 are rejected under 35 U.S.C. 103(a) as being 

3 unpatentable over Hales et al., "Method and System for Securely 

4 Downloading Content to Users", International Patent, WO 01/79971 A in 

5 view of Joshi, "Computer Software Security System", U.S. Patent, 

6 4,688,169. Claims 3 and 9 are rejected for the reasons supplied by the 

7 European patent examiner in the International Search Report performed on 

8 12/19/03. 
9 

10 
11 



12 Conclusion 

13 

14 The prior art made of record and not relied upon is considered pertinent to 

15 applicant's disclosure: 
16 

17 Cok, "System for Secure Distribution and Playback of Digital Data", U.S. 

18 Patent 6,865,550 B1. 

19 Sims, III, "Media Content Protection Utilizing Public Key Cryptography", 

20 U.S. Patent 6,550,01 1 B1. 

21 Kataoka et al., "Security System for Protecting Information Stored in 

22 Portable Storage Media", U.S. Patent 5,857,021 . 
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1 Lee et al., "System for Preventing an Illegal Copy of Digital Contents", 

2 European Patent, EP 105101 1 A2. 

3 Jon Iverson, "Making the Internet Safe for the Music Industry", 3/5/2000, 

4 Stereophile, www.stereophile.com/news/10691/inclex. html. 

5 Business Wire/Gale Group, "Cirrus Logic and InterTrust Launch 

6 hardware/Software Solution That Enables Secure Internet Distribution for Billion- 

7 Dollar Music Industry", 3/2/2000, www.looksmart.com. 

8 Matt Perry, "Ensuring Security the Hard Way", 12/01/2000, EETimes 

9 Online. 

10 "Is SDMI a Consumer's Nightmare?", 2/3/2000, Slashdot, 

1 1 http://slashdot.org/article.pl?sid=00/02/02/1 124200&mode=nested. 
12 

1 3 Any inquiry concerning this communication or earlier communications from 

14 the examiner should be directed to Jeffery Williams whose telephone number is 

15 (571)272-7965. The examiner can normally be reached on 8:30-5:00. 

16 If attempts to reach the examiner by telephone are unsuccessful, the 

17 examiner's supervisor, Andrew Caldwell can be reached on (571) 272-3868. The 

1 8 fax phone number for the organization where this application or proceeding is 

19 assigned is 703-872-9306. 
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1 Information regarding the status of an application may be obtained from 

2 the Patent Application Information Retrieval (PAIR) system. Status information 

3 for published applications may be obtained from either Private PAIR or Public 

4 PAIR. Status information for unpublished applications is available through 

5 Private PAIR only. For more information about the PAIR system, see http://pair- 

6 direct.uspto.gov. Should you have questions on access to the Private PAIR 

7 system, contact the Electronic Business Center (EBC) at 866-21 7-91 97 (toll- 

8 free). 

10 

11 Jeffery Williams ANDREW CALDWELL 

12 571.272.7965 SUPERVISORY PATENT EXAMINER 

13 4.27.05 




